Privacy Policy

Privacy of personal information is very important in Xorofy. At Xorofy we respect your need for online privacy and protect any information that you may share with us, in an appropriate manner. Our practice as regards use of your information is as set forth below. As a condition to use of our services, you consent to the terms of the Xorofy Privacy Policy as it may be updated from time to time.

Information which we use:

Personal Information which is being gathered through the Service consists of any personal details provided consciously and voluntarily by a Customer (Employer), End User or the Customer’s administrator or through your use of the Xorofy platform. This may include your name (first and last), birthdate, gender, nationality, job title, phone number(s), date you first started working for your employer, department you work in, employee ID/ national security number, address, country, city, and other dependents name, gender and birth, status in the system and in the workplace, IP address and other unique identifiers.

GEOLOCATION DATA:

When using the Mobile Apps, Current location address and location coordinates (longitude and latitude), to allow location-based features and services to properly work like e-Track.

Device Information:

When using the Mobile Apps, we may request access to your device’s camera, photo storage. This allows you to take and upload pictures and such access would only be used in ways you choose. You may at any time revoke access at the device level. We do not access your device’s camera and photo storage without your permission. We use mobile analytics software to allow Us to better understand the functionality of Our Mobile Apps on your phone. This software may record information such as how often you use the application, the events that occur within the application, aggregated usage, performance data, and where the application was downloaded from. We do not link the information We store within the analytics software to any Personal Information you submit within the Mobile Apps. When you download and use the Mobile App, we automatically collect your device information such as operating system version, type, hardware usage statistics, etc. The GDPR legal basis for processing this information is the contractual obligation to your employer to perform the Services.

Mobile Push Notifications/Alerts:

When using mobile app, we may request to you send promotional and non-promotional push notifications or alerts to your mobile device. You can deactivate these messages at any time by changing the notification settings on your mobile device. Download File: when using mobile apps, we may request access to your device’s storage to download the pdf file, You may at any time revoke access at the device level. Network Information: when using the Xorofy may access to network information to provide the better service.

Security:

We have implemented administrative, technical, and physical security measures to help prevent unauthorized access. Despite these measures, no data transmission over the Internet can be entirely secure, and we cannot guarantee or warrant the security of any information you transmit via our websites or apps. Please note that you are responsible for maintaining the security of your credentials used to access any Digital Markets service or account, and you must report suspected unauthorized activity to us. We make reasonable efforts to restrict access to information to only those employees, contractors, and agents who need such access in order to operate, develop, improve, or deliver our programs, products, and services.

   Google API Policy:

Xorofy uses Google API data in compliance with the Google API Services User Data Policy, including Limited Use requirements. For more details, please review the policy here

   Data Usage:

We only access and use your Google Calendar data for the purpose of scheduling interviews. We do not access or use any other data from your Google account, and your calendar data is handled securely, with access limited to the functions necessary for interview scheduling.

   Data Retention:

We retain Google user data only for as long as necessary to fulfill the purposes of scheduling interviews. User data is stored securely and only accessible by authorized personnel.

   Data Deletion:

Users have the right to request the deletion of their data at any time. Upon receiving a deletion request, we will permanently delete all associated Google user data from our systems within 30 days.

1. Google API Services

Xorofy uses Google API data in compliance with the Google API Services User Data Policy, including the Limited Use requirements. When a recruiter connects their Google account, we request only:

• openid, email — to identify the connected account.
• https://www.googleapis.com/auth/calendar.events — to create, update, and cancel interview events on the recruiter’s Google Calendar and to attach a Google Meet joining link to those events.

The Google Meet link is generated as part of the calendar event; we do not access any separate Google Meet data, and we do not access, read, store, or process meeting contents, recordings, or transcripts. We access Google Calendar data solely to schedule and manage interviews and access no other data from your Google account. We do not use this data for advertising, we do not sell it, and Xorofy’s use and transfer of information received from Google APIs adheres to the Limited Use requirements, including the prohibition on using the data to develop, improve, or train generalized AI/ML models. Retention & deletion: We retain Google user data only as long as necessary to schedule interviews. You may request deletion at marketing@xorofy.com (permanently deleted within 30 days), or revoke access anytime at your Google Account permissions page.

2. Microsoft Services (Microsoft Teams / Microsoft Graph)

Xorofy integrates with Microsoft 365 via the Microsoft Graph API. When a recruiter connects their Microsoft account, we request only these delegated permissions:

• OnlineMeetings.ReadWrite — to create a Microsoft Teams meeting and generate its joining link.
• Calendars.ReadWrite — to create, update, and cancel the interview event on the recruiter’s calendar.
• User.Read — to identify the connected account.
• openid, profile, offline_access — to sign in and maintain the connection without re-prompting.

We access Microsoft data solely to schedule and manage interviews. We do not read, store, or process the contents, recordings, or transcripts of any Teams meeting. We do not use this data for advertising, we do not sell it, and we do not share it with third parties except as required to provide the feature or by law. Retention & deletion: We retain Microsoft user data only as long as necessary to schedule interviews. You may request deletion at marketing@xorofy.com (permanently deleted within 30 days), or revoke access via your Microsoft account permissions or your organization’s Entra ID admin.

3. Zoom

Xorofy integrates with Zoom via Zoom’s OAuth API. When a recruiter connects their Zoom account, we request only:

• meeting:write — to create a Zoom meeting for the signed-in recruiter and attach its joining link to the interview.

We access Zoom data solely to create interview meetings. We do not access, store, or process meeting contents, recordings, or transcripts. We do not use this data for advertising, we do not sell it, and we do not share it with third parties except as required to provide the feature or by law. You may request deletion at marketing@xorofy.com (permanently deleted within 30 days), or revoke access anytime from your Zoom account’s installed-apps settings. Xorofy’s use of Zoom data complies with the Zoom API Terms of Use.

   Data Privacy Assurance:

We guarantee that your data remains entirely secure and confidential. We do not share any user data with third parties or employ AI models for data processing, ensuring full compliance with privacy standards.

   Content Usage Policy:

The content on this website, including text, images, and other materials, may not be copied or reproduced without explicit permission and proper acknowledgment.

Changes to the privacy policy:

The terms of this Privacy Policy will govern the use of the Service and any information collected in connection therewith, however, Xorofy may amend or update this Privacy Policy from time to time. The most current version of this Privacy Policy will always be posted at: https://xorofy.com/privacy-policy/. Unless otherwise agreed with the Customer, we will endeavor to provide notice of material changes to this policy on the homepage of the website and (if applicable) via an e-mail. Such material changes will take effect seven (7) days after such notice was provided on our website or sent by email. Otherwise, all other changes to this Privacy Policy are effective as of the stated “Last Revised” date and your continued use of Services will constitute your active acceptance of, and agreement to be bound by, the changes to the Privacy Policy. If you have any questions (or comments) concerning this Privacy Policy, you are welcome to send us an email or otherwise contact us at marketing@xorofy.com and we will make an effort to reply within a reasonable timeframe, and not over 30 business days.

Last Updated: July 25, 2026